Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3138392e302f32342d3234203d3e20323634303236.roa
File:                     3134332e302e3138392e302f32342d3234203d3e20323634303236.roa (raw, json)
Hash identifier:          1GR6JHDdXEvOxJUXW1FMSSaxppsYOnS//LblVhiGt4U=
Subject key identifier:   7F:86:53:6F:0D:03:23:AC:07:75:5F:DC:43:94:35:A4:F6:04:71:AE
Certificate issuer:       /CN=40E329E137ACE9C947E72E009F44D35DDC786723
Certificate serial:       121F862F8D833042777BF206F2F16D998CEEFA2B
Authority key identifier: 40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E329E137ACE9C947E72E009F44D35DDC786723.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3138392e302f32342d3234203d3e20323634303236.roa
Signing time:             Sun 20 Nov 2022 13:30:17 +0000
ROA not before:           Sun 20 Nov 2022 13:25:17 +0000
ROA not after:            Sun 19 Nov 2023 13:30:17 +0000
asID:                     264026
IP address blocks:        143.0.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1f:86:2f:8d:83:30:42:77:7b:f2:06:f2:f1:6d:99:8c:ee:fa:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E329E137ACE9C947E72E009F44D35DDC786723
        Validity
            Not Before: Nov 20 13:25:17 2022 GMT
            Not After : Nov 19 13:30:17 2023 GMT
        Subject: CN=7F86536F0D0323AC07755FDC439435A4F60471AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ad:19:bd:c0:b5:f6:00:f1:77:32:7e:39:de:
                    75:5b:4e:dc:8f:d1:67:45:23:47:b5:65:a3:b0:bf:
                    b3:ef:d6:c4:9b:a7:54:26:c8:2d:9b:b3:d3:d1:2b:
                    05:c6:54:28:1c:ef:9f:32:aa:9d:fb:8a:43:02:cc:
                    b5:75:85:72:19:78:54:98:d7:b8:ef:ad:7b:f5:c7:
                    6c:fa:22:d5:d1:1c:2b:09:c9:dc:04:d9:e0:0f:1b:
                    89:1c:7d:b2:47:09:d5:39:88:e9:a9:db:ff:cf:f2:
                    c2:25:19:bb:2b:22:d8:92:1e:27:3b:de:79:43:5b:
                    56:18:98:37:cf:99:98:2f:9a:36:46:b7:aa:e4:8d:
                    ee:f8:00:f9:1c:6c:d9:c1:e0:e7:1b:a3:47:84:69:
                    6b:34:2c:66:63:98:49:9e:ed:73:f8:b7:a5:04:93:
                    af:fa:37:f1:5a:b1:a8:ce:7d:19:cc:94:44:77:37:
                    51:87:cc:4e:f7:3a:b7:a1:f9:52:f6:ab:45:7d:51:
                    35:6e:4e:b9:53:0e:c1:40:03:96:fe:77:e3:ff:dc:
                    3c:32:c1:03:33:75:2c:44:e2:c0:ed:2f:6d:0a:99:
                    48:66:8b:b3:62:0b:15:58:8a:0a:85:1e:5f:28:c3:
                    b0:70:eb:1b:69:93:33:a6:55:22:7b:b9:5a:b1:f1:
                    26:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:86:53:6F:0D:03:23:AC:07:75:5F:DC:43:94:35:A4:F6:04:71:AE
            X509v3 Authority Key Identifier:
                keyid:40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/40E329E137ACE9C947E72E009F44D35DDC786723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E329E137ACE9C947E72E009F44D35DDC786723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3138392e302f32342d3234203d3e20323634303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:c1:6a:01:ab:24:e2:7d:cc:4a:ae:5e:e9:af:d3:dc:6b:c0:
         60:42:d4:a5:83:5b:12:87:f0:34:a7:f4:c7:6c:19:e8:e3:a1:
         a9:be:5a:e2:2b:3c:89:8a:6d:14:ad:c1:1b:c9:30:2b:eb:01:
         65:82:17:01:4a:14:fe:73:a0:4b:a0:d2:7e:a4:cc:69:2f:0a:
         b1:0b:39:1a:ac:3d:11:e1:d2:ab:3b:fe:d3:c5:2a:4f:3b:db:
         9e:0e:f1:82:fd:c8:31:e6:74:06:89:52:10:30:6d:24:23:91:
         7f:61:2c:4f:f1:47:df:9b:f8:d4:c9:da:e7:10:06:e6:4e:41:
         7c:f1:03:53:bb:b6:0c:20:1f:c4:91:32:f1:b6:d8:70:da:71:
         34:b1:31:75:14:21:15:36:4b:5e:01:98:f9:b1:33:f1:37:df:
         5f:11:52:34:be:58:b9:74:54:1e:47:51:ed:81:3e:fa:a7:4d:
         2f:27:4a:81:84:34:30:a9:d7:c2:7c:52:90:27:48:00:7c:eb:
         ad:af:93:1b:e3:9a:35:00:77:0d:ed:c5:12:2b:7f:eb:ad:64:
         eb:24:6a:60:e4:5b:ad:7f:9f:85:bd:02:97:1e:77:a5:3b:29:
         5a:8b:b2:f1:30:1d:3b:65:4e:62:ad:f5:45:a0:d7:00:5f:9c:
         57:56:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org